Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: CFFSRLbVy+HUzcwesb0q3cZqltZJGNzu3f42zUjDyew=
Subject key identifier: 33:80:04:85:48:F5:27:52:0E:B7:61:00:70:0D:A0:5D:B0:2D:6E:0E
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019A07124074249F291EEAE9BF285F583BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0CEE
Signing time: Tue 21 Oct 2025 14:00:27 +0000
Manifest this update: Tue 21 Oct 2025 14:00:27 +0000
Manifest next update: Wed 22 Oct 2025 14:00:27 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: RnNUOps4iuI//04K48omcE8NudEZ+Ch+rpgQy4OwYQU=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:12:40:74:24:9f:29:1e:ea:e9:bf:28:5f:58:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Oct 21 14:00:27 2025 GMT
Not After : Oct 22 14:00:27 2025 GMT
Subject: CN=3380048548f527520eb76100700da05db02d6e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:40:42:fc:d6:d5:75:6c:10:24:3e:68:ca:
88:d8:d8:0b:87:7a:00:e6:c3:8b:dc:40:8f:56:d0:
8b:02:55:26:a7:0d:5e:a6:24:a9:26:25:0c:b9:c6:
98:70:04:57:32:95:b1:a9:b9:82:df:12:48:67:24:
28:cc:30:2f:41:d3:91:11:1a:44:18:e3:0a:7f:7a:
03:2b:ee:38:58:8c:84:b1:58:e7:91:de:c3:04:01:
8b:26:ef:dd:1d:ec:1c:d0:68:cd:14:e9:b2:b0:61:
08:2c:7a:cd:fa:1b:be:f3:4e:3c:ee:95:d5:ef:b7:
fc:e1:65:4a:a7:f1:de:6f:44:11:4e:45:61:47:6e:
8b:5b:82:92:ed:5b:e1:54:a3:77:7e:b4:20:51:db:
c1:36:f8:76:99:cd:67:60:ca:4b:d2:3a:8a:ae:40:
2a:e2:9f:43:80:fb:79:39:0a:0d:86:5d:1f:8b:ed:
33:c1:51:9e:b3:d5:00:6f:70:31:0c:80:4a:86:e1:
61:59:d4:c5:51:33:1e:52:09:21:71:08:56:40:9a:
2e:da:4a:8b:24:53:e1:91:21:bd:2d:5b:28:4f:ba:
1b:a0:ee:be:8e:4f:71:85:cf:f4:fb:b4:5f:a9:72:
d8:66:0d:7b:4b:9c:ec:9f:81:a7:21:e6:44:6a:28:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:04:85:48:F5:27:52:0E:B7:61:00:70:0D:A0:5D:B0:2D:6E:0E
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c4:e0:10:1c:3f:83:95:92:85:6d:25:2f:55:72:31:5a:7d:
76:46:68:b9:be:bd:8e:1c:10:d3:43:db:67:eb:fe:9a:81:bf:
ba:81:b6:40:ee:d5:76:08:66:b6:24:3c:85:f6:d9:3e:24:3b:
c7:09:fc:b9:23:17:1e:81:43:c7:9b:7c:9d:c6:e8:0e:46:d6:
94:e3:b6:c9:f0:9c:77:9f:c5:7a:35:f7:c4:89:65:91:b6:29:
9d:96:12:b9:db:15:7d:90:25:a7:16:c3:52:af:32:d2:52:71:
11:56:94:62:c9:76:a4:20:e2:31:c2:2c:79:3a:df:bc:dc:3c:
3c:fb:5b:0f:2b:3a:7c:8e:4c:95:9f:76:ce:df:ad:26:7f:eb:
e7:5b:49:03:92:d8:7d:df:01:31:22:47:0c:5a:32:27:05:2f:
90:a7:24:e8:3a:4e:53:57:c2:87:f0:9d:23:ac:6e:4e:9a:43:
e1:36:fd:11:fe:43:fa:33:fd:26:5c:28:e5:de:79:75:6a:32:
b9:bb:25:92:1b:46:72:30:49:64:ae:b7:9d:50:07:18:70:bf:
44:38:ac:17:79:0b:81:a3:8f:24:cc:0d:93:2c:e6:a8:43:c5:
81:b0:c6:2b:36:fb:1f:a2:a4:b8:36:5e:ba:95:af:f7:2d:ae:
93:99:1b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHEkB0JJ8pHurpvyhfWDvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3
YzkxMDEwHhcNMjUxMDIxMTQwMDI3WhcNMjUxMDIyMTQwMDI3WjAzMTEwLwYDVQQD
EygzMzgwMDQ4NTQ4ZjUyNzUyMGViNzYxMDA3MDBkYTA1ZGIwMmQ2ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ5AQvzW1XVsECQ+aMqI2NgLh3oA
5sOL3ECPVtCLAlUmpw1epiSpJiUMucaYcARXMpWxqbmC3xJIZyQozDAvQdORERpE
GOMKf3oDK+44WIyEsVjnkd7DBAGLJu/dHewc0GjNFOmysGEILHrN+hu+80487pXV
77f84WVKp/Heb0QRTkVhR26LW4KS7VvhVKN3frQgUdvBNvh2mc1nYMpL0jqKrkAq
4p9DgPt5OQoNhl0fi+0zwVGes9UAb3AxDIBKhuFhWdTFUTMeUgkhcQhWQJou2kqL
JFPhkSG9LVsoT7oboO6+jk9xhc/0+7RfqXLYZg17S5zsn4GnIeZEaigK5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOABIVI9SdSDrdhAHANoF2wLW4OMB8GA1UdIwQY
MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt
OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz
LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcTgEBw/
g5WShW0lL1VyMVp9dkZoub69jhwQ00PbZ+v+moG/uoG2QO7VdghmtiQ8hfbZPiQ7
xwn8uSMXHoFDx5t8ncboDkbWlOO2yfCcd5/FejX3xIllkbYpnZYSudsVfZAlpxbD
Uq8y0lJxEVaUYsl2pCDiMcIseTrfvNw8PPtbDys6fI5MlZ92zt+tJn/r51tJA5LY
fd8BMSJHDFoyJwUvkKck6DpOU1fCh/CdI6xuTppD4Tb9Ef5D+jP9Jlwo5d55dWoy
ubslkhtGcjBJZK63nVAHGHC/RDisF3kLgaOPJMwNkyzmqEPFgbDGKzb7H6KkuDZe
upWv9y2uk5kbUA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:10:36 2025 by rpki-client